BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
2026-07-24T19:24:21Z•0c9a25961c81599a29734914b750a738d9f8abb10846ae2692958f5fd55a6c50
Adobe Acrobat extensionAgentForgerBing ImagesBlueNoroffCVE-2026-16232CVE-2026-29059CVE-2026-32194CVE-2026-48294CVE-2026-64600CVE-2026-8933CertighostChaos ransomwareCheck PointClaude CoworkGolden ChickensHermes AI agentJadeProxMATCHBOIL.V2Redis zero-days (Kimi K3)RefluXFSTriBack LoaderUAC-0099Ubuntu snap-confineWindmillmsaRAT
What happened
Multiple high-impact security incidents and disclosures across cloud, enterprise, open-source, and AI platforms. Notable items include: BlueNoroff operating a Zoom/Microsoft Teams typosquatting phishing kit to profile crypto wallets; Certighost (AD certificate abuse) allowing low‑privileged users to obtain Domain Controller certificates and potentially perform DCSync; an OpenAI ChatGPT Workspace Agents flaw (AgentForger) that could have installed rogue agents via a phishing link; crafted SVGs in Bing Images leading to SYSTEM/root code execution (Microsoft-issued CVE-2026-32194); active exploit
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 0c9a25961c81599a29734914b750a738d9f8abb10846ae2692958f5fd55a6c50
- Enrichment time
- 2026-07-24T19:24:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.